Env-Hide

Secure your .env file with a password/ Secret SALT and use it in your project. Encrypt / decrypt your .env files. Hide your environment variables from the world. You can set that Secret salt as System Env using AWS task defination, or directly using your cloud service provider to enhance the overall app security. Hide your environment variables.

Install

npm install -g env-hide

Usage CLI

Usage: env-hide -k YOUR_SECRET_KEY

Options:

  -k, --key          YOUR_SECURITY_SALT (required)
  -o, --operation    encrypt/decrypt (required)
  -h, --help         output usage information
  -p, --path         file path (optional)
  -a, --algo         algorith to use, default: 'aes-256-ctr' (optional)
  -f, --file         output decrypted file? true/false (optional)

Encrypt .env using cli

    env-hide -o encrypt -k YOUR_SECRET_KEY

Decrypt .env.enc to OUTPUT Original .env using cli

    env-hide -o decrypt -k YOUR_SECRET_KEY -f true

Encrypt .env to Generate .env.enc (NODE JS)

const envHide = require('env-hide');
envHide.encrypt({ key: SECRET_KEY_SALT});

Decrypt .env.enc (NODE JS)

const envHide = require('env-hide');

const envs = envHide.decrypt({ key: SECRET_KEY_SALT});
console.log(envs);

Argument Keys :decrypt({})

| Parameter | Type | Description | | :-------- | :------- | :------------------------- | | key | string | secret_key, default: null, required:true| | algo | string | algo to decrypt: aes-256-ctr| | enc | string | enc file name , default: .env.enc| | addToProcess | boolean | automatically add to process.env, default: true| | realOutput | boolean | return actual output(decrypted) of encrpted file, default: false| | outputDecryptFile | boolean | automatically create original .env file back, default: false|

Argument Keys :encrypt({})

| Parameter | Type | Description | | :-------- | :------- | :------------------------- | | key | string | secret_key, default: null, required:true| | algo | string | algo to decrypt: aes-256-ctr| | env | string | env file to encrypt , default: .env| | output | boolean | return encryted output, default: false|

Steps to Update existing Encrypted File and add new environment variables via CLI

• Get original .env: env-hide -o decrypt -k YOUR_SECRET_KEY -f true
• Update or Add new Env Variables to your decrypted .env file
• Encrypt original .env : env-hide -o encrypt -k YOUR_SECRET_KEY
• DELETE the .env file